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Abstract. We show that the problem of checking if an infinite tree gen- 
erated by a higher-order grammar of level 2 (hyperalgebraic) satisfies 
a given p-calculus formula (or, equivalently, if it is accepted by an al- 
ternating parity automaton) is decidable, actually 2-EXPTIME-complete. 
Consequently, the monadic second-order theory of any hyperalgebraic 
tree is decidable, so that the safety restriction can be removed from 
our previous decidability result. The last result has been independently 
obtained by Aehlig, de Miranda and Ong. Our proof goes via a char- 
acterization of possibly unsafe second-order grammars by a new variant 
of higher-order pushdown automata, which we call panic automata. In 
addition to the standard pop, and pop, operations, these automata have 
an option of a destructive move called panic. The model-checking prob- 
lem is then reduced to the problem of deciding the winner in a parity 
game over a suitable 2nd order pushdown system. 


Introduction 


Context-free tree grammars constitute the basic level in an infinite hierarchy of 
higher-order grammars introduced by W. Damm [9] (built on the earlier ideas 
of [12]). Courcelle [7] proved decidability of the monadic second-order (MSO) 
theory of any tree generated by an algebraic (context-free) tree grammar. Later 
Knapik et al [14, 15] attempted to extend this decidability result to all levels of 
the Damm hierarchy. This has been achieved partially, namely with an additional 
syntactic restriction imposed on the grammars, called safety: the MSO theory 
of any tree generated by a safe grammar of level n is decidable. 

Higher-order grammars can be seen as program schemes, where functions 
can take higher-order arguments. The tree generated by such a grammar de- 
scribes completely the semantics of the program scheme. Thus decidability of 
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the MSO theory of such a tree implies decidability for a large class of properties 
of behaviours of higher-order program schemes. 

The safety requirement, roughly speaking, prevents the use of individual 
parameters in the functional arguments of higher-order functions. The concept 
of safe (tree) grammars has been further justified by a characterization in terms 
of higher-order pushdown automata originally introduced by Maslov [17]: the 
trees generated by safe higher-order grammars of level n coincide with the trees 
recognized (in suitable sense) by pushdown automata of level n [15]. See [6, 8] 
for another characterization of this hierarchy. 

Monadic second-order logic is extremely succinct, which yields the non- 
elementary complexity of the MSO theories, even for regular trees. However, 
over trees, the MSO logic has the same expressive power as the p-calculus, 
which is much better tractable algorithmically. Cachat [4] showed that the model- 
checking problem for the u-calculus and the trees recognized by the pushdown 
automata of level n is in n-EXPTIME, actually n-EXPTIME-complete [?, 5]. 

In this paper we show that for the level 2 (hyperalgebraic), the model checking 
problem remains decidable, actually 2-EXPTIME-complete, also for grammars 
without safety restriction. 

To this end, we first find an automata-theoretic counterpart of unsafe hyper- 
algebraic grammars, which is an extension of second-order pushdown automata 
by a new destructive operation that we call panic. This operation allows us 
to simulate the change of environment needed to evaluate parameters of un- 
safe productions. We further introduce 2nd order pushdown systems with panic 
(equipped with alternation and ranks), which can be viewed as a generalization 
of pushdown systems studied in [21, 4]. The model-checking problem then re- 
duces to the problem of deciding the winner in a parity game over such a system. 
The key step is a reduction of this game to a game over a 2nd order pushdown 
system without panic, for which a 2-EXPTIME procedure is already known [4]. 

An immediate consequence of our result is that the model checking problem 
for the hyperalgebraic grammars is decidable also for the monadic second-order 
logic, consequently the MSO theory of any hyperalgebraic tree is decidable. 
This result has been recently independently obtained by Aehlig, de Miranda 
and Ong [2]*, by a different proof, based on transformations of infinite lambda 
terms. Compared to [2], the present paper has two new elements: (1) it gives 
a characterization of unsafe grammars by panic automata, (2) the actual proof 
yields an optimal decision procedure for the y-calculus model checking. 

At present we do not know if the safety requirement really restricts the 
generating power of the tree grammars. Recently, Aehlig, de Miranda and Ong 
have studied the safety restriction [1]. They have shown that it is inessential for 
the word grammars of level 2, where a grammar, as usual, can generate a set of 
words. To simulate a non-safe grammar by a safe one, they use nondeterminism 
in an essential way, hence their result is not directly applicable here. 

Due to space limitations, many arguments are omitted or sketchy; they will 
appear in the full paper (see [16] for a preliminary version). 


4 C.f. the joint message of the authors to the TYPES Forum [3]. 


1 Trees 


Types, terms, and trees. We fix the set of simple types 7 constructed from 
a unique basic type 0, by the rules 7 ::= 0 |(7™ — 72). The level of a type is 
defined by (0) = 0, and (Tı — 72) = max(1 + &(71), &(72)). Thus 0 is the only 
type of level 0 and each type of level 1 is of the form 0” — O for some n > 0 
(which abbreviates (0 — (0 — (---(0 > 0)...))), with n + 1 occurrences of 0). 

A typed alphabet is a set I of symbols, each y in I’ given with its type, y : T. 
We inductively extend I to the set T(I’) of (applicative) terms over I; if t : 
Tı > T and s : 7, then (ts) : T2. As usual we abbreviate (--- ((tot1)t2) +--+ Jtn by 
tot; ...tn. For terms t,t,,...,tm, and symbols z1,..., 2m, of appropriate types, 
term t[21:=t1,..., Zn:=t,] results from simultaneous replacement in t of z; by ti. 

The set of natural numbers is denoted by w. A tree (over a set X) is any 
nonempty prefix-closed subset T of the free monoid X*, with £ as the root. If 
u ET, x €X, and uz € T then uz is a successor of u in T. 

Now let X be a signature, i.e., a typed alphabet of symbols of level < 1. A 
X-tree is a mapping t: dom t > X, where dom t C w* is a tree, and if t(w) is a 


symbol of type O0! — 0 then w has exactly k successors, wl,...,wk (hence w is 
a leaf if t(w):0). The set of X-trees is written T” (2). 
A limit of a sequence to,t,,... of X-trees is defined, provided that for any 


k, there is m = m(k), such that t,,[k and tw ìk coincide, for all n,n’ > m(k) 
(where, in general, t/k is restriction of t to the set {w € dom t : |w| < k}). Then 
lim tn € T(Z) is just the set-theoretical union of the functions tn m(n). 


Grammars. We fix an infinite typed alphabet of variables (or parameters), X. 
A grammar is a tuple G = (X, N,S,E), where X is a signature, N is a finite 
typed alphabet set of nonterminals®, S € N is a start symbol of type 0, and E 
is a set of productions of the form 


Fzi... Zm > W 


where F : 7, > T2 ++- + Tm — 0 is a nonterminal, z; a variable of type 7;, and w 
an applicative term in T(X UNU {21 ...Zm}) of type 0. The level of a grammar 
is the highest level of its nonterminals. Since we are interested in grammars as 
generators of (single) X-trees, we assume that for each F, there is exactly one 
production with F on the left hand side. 

The single-step reduction relation —, between terms over XU N is defined 
inductively by the following clauses. 

1. Fti...tk >; t[z1:5t1, . . -, Zk:=tp] if there is a production Fzı ... zk => t 
(with zi : pi, i= 1,..., k), and t; E T(X U N)p;, for i = 1,...,k. 

2. If t —, t then (st) —, (st’) and (tq) —, (t'q), whenever the expressions 
in question are applicative terms. 


5 Without loss of generality, we assume that the types of nonterminals are homo- 
geneous, i.e., O or T1 —> ++: — Tmn — 0, where if each 7; is homogeneous and 
LT) > LT) >... > lm). 


That is, t —, t whenever t is obtained from t by replacing some occurrence 
of a nonterminal F by the right-hand side of the appropriate production in which 
all parameters are in turn replaced by the actual arguments of F. 

In order to define the result of an infinite derivation, we extend X to X+ = 
SU{L}, with L : 0. With any term t over X U N, we inductively associate 
a term t+ over +, by setting ft = f (for f € ©), X+ = 1 (for X € N), 
and (st)+ = (str+) whenever s+ # L, otherwise (st)+ = L. Then, we define 
relation t -»&° t’, where t is a term in T(X U N) and t' a tree in T’(X'+), by 


— t is finite, and there is reduction sequence t = to >; ... >g tn = t’, or 
— t is infinite, and there is an infinite reduction sequence t = to >, ti —, ... 
such that t = lim t$. 


To define a unique tree produced by the grammar, we recall a standard approxi- 
mation ordering on T (+): t! Ct if dom t C dom t and, for each w € dom t', 
t (w) = t(w) or t/(w) = L. Then the tree generated by G is defined by 


[G] = sup{t € T” (D+): S >X t} 


It is easy to see that, by the Church-Rosser property of our grammar, the above 
set is directed, and hence [G] is well defined since T” (+) with the approxima- 
tion ordering is a cpo. 

In this paper we only study grammars of level 2, which we call hyperalgebraic, 
as they constitute the next level above the algebraic (context-free) grammars. 


Parity games. A parity game is a perfect information game of possibly infinite 
duration played by two players, say Eve and Adam. We present it as a tuple 
(Va, W, E, pi, 2), where V3 and WĶ are (disjoint) sets of positions of Eve and 
Adam, respectively, Æ C V x V is the relation of possible moves, with V = 
V3UNW, pi E V is a designated initial position, and 2: V — w is the ranking 
function. 

The players start a play in the position pı and then move the token according 
to relation E (always to a successor of the current position), thus forming a path 
in the graph (V, E). The move is selected by Eve or Adam, depending on who 
is the owner of the current position. If a player cannot move, she/he looses. 
Otherwise, the result of the play is an infinite path in the graph, vo, v1, v2,.... 
Eve wins the play if limsup,,_,,, (Un), is even, otherwise Adam wins. 

Parity games, introduced by Emerson and Jutla [10, 18], have been recognized 
as a combinatorial essence of many model checking problems. A crucial property 
is the positional determinacy: any position is winning for one of the players, and 
moreover a winning strategy of player 0 can be made positional, i.e., represented 
by a (partial) function o : Vg — V.° We say simply that Eve wins the game G if 
she has a winning strategy, the similar for Adam. We refer the reader to [20, 13] 
for an introduction to parity games. 


6 Positional strategy ø is winning for 0 if every play pı = qi,q2,..- is won by 9, 
provided that qe € Va follows qe+1 = o (qe). 


Model checking. The model checking problem in our consideration is to verify 
if the tree generated by a given grammar G satisfies a property y expressed in 
some logical language, in symbols [G] H y. The most expressive logics consid- 
ered in literature are the monadic second-order logic (MSO) or the p-calculus; 
both have the same expressive power over X-trees [19]. In this paper we avoid 
a logical machinery by using an equivalent formalism of alternating parity au- 
tomata (defined below). A polynomial-time translation from the p-calculus to 
alternating automata, p +> Ay, is known [10], such that, for any tree t, t = y iff 
t is recognized by Ay. 


An alternating parity tree automaton over signature X can be presented as 
a tuple 


B= (X, Qa, Qv, qı, ô, 2) 


where Q3 U Qy = Q is a finite set of states with the initial state q1, 2: Q > w 
is a ranking function, and ô is a set of transitions of the form q > f(q1,.--, 4x), 
where q,41,---, qk E€ Q and f € X with type f : 0% 0. 


The acceptance of a tree t € T™(X) by the automaton B can be presented by 
a suitable parity game. We first define a the computation tree, r : domr — Q 
with domr C (w x w)*, such that, for any u € domr, the projection 7(u) on 
the first component is a node in dom t. We let r(€) = qi, and whenever r(u) = q 
and t(mı(u)) = f, then, for any transition of the form q —> f(qı,---,qk), the 
node u has a successor u(i, j) with r(u(i, j)) = qi, for some j, and i = 1,...,k. 
Now consider a parity game Game(B,t) with V = dom r partitioned such that 
u € V3 iff r(u) € Qs, the initial configuration £, and R(u) = R(r(u)). We let B 
accept the tree t iff Eva wins this game. 

The model checking problem addressed in this paper will be the following. 


Problem 1 Given a 2nd order grammar G and an alternating parity tree 
automaton B. Does B accept [G] ? 


2 Panic automata 


Classically the content of a pushdown store is just a word over the pushdown 
alphabet. For our purpose, it is convenient to consider pushdown symbols with 
“time stamps” (sort of). We let a level 1 pushdown store (or a 1-pds or 1-stack) 
over an alphabet I be a non-empty word a,...a; over I’ x w. A level 2 pds 
(2-pds, 2-stack) is a non-empty sequence s4... sı of 1-pds’s, which may also be 
written as [s1][s2]...[s:] or as s’[s;], where s’ stands for [s1][s2]...[s:-1]. The 
1-stack s; is called the i-th row of s. We assume that push-down stores grows to 
the right, so that, for instance, the item (a, m) is on top of the 2-pds s’[w(a, m)]. 
By top(s) we denote the topmost I’-symbol of s, i.e., top(s'[w(a, m)]) = a. 


The following operations are possible on level 2 push-down stores. 


push, (a) ([s1][s2] . - . [sı][w]) 
pop; (a[wé]) = al 
pushy(a[w]) = afw] [w] 
)=al 
) 
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The operation pop, (resp. pop,) is undefined on a 2-stack s if it contains only 
one row (resp. the top row of s has only one element). 

Let L be a symbol in T. It is easy to see that if a 2-pds [s1] . . . [sm] is generated 
from [(L,0)] by the above operations, and s; = (ai, 1, Mi,1)--- (Qi ki, Mi,k;) then 
mij <i—l1, and j < j’ follows m; j < mi j. Intuitively, whenever a new symbol 
a € I is placed on the top of the stack, the second component registers the 
number of the stack row which is directly below the current top row. Later 
the symbol can be duplicated several times by subsequent executions of pusho, 
but the second component keeps record of the level when it first appeared in the 
stack. The panic operation returns to the 2-stack previous to the first appearance 
of the actual top symbol. 

Now let X be a signature, and let X, C X be the set of symbols of type 0” — 
0. A panic automaton is defined as a tuple 


A= (X,Q,T,q,, L), 


where Q is a finite set of states, with an initial state qı, T is a stack alphabet, 
with a distinguished bottom symbol L, and ô : Qx T — T is a transition function, 
where Z is the set of possible instructions, 


TC Op” x QU| JE, @, 


where Op’ = {push} (a): a € T} U{pop,, pushy, pops, panic, skip}. 

A configuration of an automaton A as above is a pair (q,s), where q E€ Q, 
and s is a 2-stack (over I’). The initial configuration is (q1, |(L,0)]). We define 
the relation —.4 on configurations as follows. Let s = [s1]... [sı] [w(a, m)]. 


1. If d(q,a) = (a,q’) with a € Op! then (q,s) > (q’,a(s)). 
2. If 5(q, a) a (f; p1; aa ,Pr) then (q, s) 7A (Dis 8), for all i = 1, vey DT. 


In the first case we write >% instead of —4. The symbol — 4 stands for the 
reflexive and transitive closure of — 4, and similarly for —%. 

Let t: domt — X be a X-tree. A partial run of A on t is a partial function 
o from an initial segment of dom t to the set of all configurations, such that if 
olw) = (q, s), for some w E€ dom t, then 6(q,a) = (f, P1, ---, pr), where f = t(w) 
and a = top(s). In addition (p;, s) -% o(wi), for each i = 1,...,r when o(wi) 
is defined. 


If a partial run is a total function over domt, we call it a run. As our au- 
tomaton is deterministic, there can be at most one tree over which A has a run. 
This is the tree accepted by A. 


3 Automata vs grammars 


Theorem 3.1. For any panic automaton A, one can construct a hyperalgebraic 
grammar Ga, such that if the automaton recognizes a tree t in T (X) then t = 
[Ga]. Conversely, for a hyperalgebraic grammar G, one can construct a panic 
automaton Ag such that if the grammars generates a tree in T (X), this is the 
(unique) tree recognized by Ag. Both constructions can be realized in polynomial 
time. 


Here we only sketch the direction G ++ Ag, which is essential for the upper 
bound result. 

Let 01,02,... be fresh identifiers of type 0, which we call holes. The push- 
down alphabet I of Ag consists of subterms of the right hand sides of the 
productions of G, possibly applied to some holes, so that the result is of type 0. 
More precisely, let u = Ft,...tqg be such a subterm, where F is an operator 


(variable or nonterminal) of type Tı > --- > Ta o* — 0. Then u0}...0, E I. 
In particular, if u : 0 then simply u € I. 
The holes 01,...,0% represent “missing arguments” of the operator F. Since 


holes are new identifiers, one can safely identify Ft, ...tqgo,...0, with Ft, ...tg 
if this is convenient. 

The idea of our simulation is that the top of pds (an expression u) repre- 
sents a variable-free expression u’ occurring in a derivation of G. Since the pds 
alphabet must be finite, the term u can only be an “approximation” of u’. This 
approximation is “evaluated” to yield an approximate representation of the next 
step of reduction. The contents of the pds represents an environment in which 
the evaluation takes place. The environment is searched if one needs to find the 
meaning of a variable, or to find a missing argument. 

The bottom pds symbol is S, the initial nonterminal. This is our approxi- 
mation in the first step of reduction. The automaton then works in phases, each 
phase beginning and ending in the distinguished state q,. We define automa- 
ton informally, by describing the possible behaviour in a phase, beginning with 
a configuration (q1, s). 


T1 Let top(s) = Fui... un, where F is a nonterminal, and let the correspond- 
ing production be Fz... £n = u. The automaton executes the instruction 
(qı, Fui... un) = (push,(u),q.), so that our next approximation is u. 

T2 If top(s) = ft,...t, where f is a terminal, then the the automaton executes 
the instruction 6(q1, fti ... tr) = (f,p1,---, Pr), followed (at the i-th branch 
of the run) by a pop, and push,(t;). Thus the next approximation at the 
i-th branch is t;. (If f is a constant, there is no further step.) 

T3 Let top(s) = x, where xv is an (ordinary) variable of type 0. To “evaluate” 
x, the automaton restores the environment where x was defined. It executes 


pop, and inspects the new top symbol. It should be of the form Ft; ...te, 
where F is a nonterminal. In addition, the variable x should be one of the 
formal parameters of F, say, the j-th one. The next approximation is tj, 
and it should be evaluated in the present environment (that of the caller). 
Another pop, is now executed, followed by a push,(t;), and the machine 
returns to state qı. 

T4 Let top(s) = yu,...up where ¢ is a variable of type 0” — 0. If we now 
executed a pop, as above then the information about the actual parameters 
U1,...,Un would be lost. Instead, a push, is executed, followed by a pop,. As 
in the previous case the top of the stack should be of the form Ft, ...t. and 
y should be one of the formal parameters of F, say, the j-th one. However 
now the new approximant tj is an expression of a functional type and we 
actually place tj 01 ...0, on the pds rather than tj. 

T5 The last case is when top(s) is a hole, say o;. The automaton gets now into 
a panic. After the panic move the top of the pds should be wv, ...v for 
some variable wy. The new approximation is v;. We execute in order pop, 
and push, (v;) and return to state qı. 


To explain the last case let us first observe that holes (missing arguments) 
are created when we attempt to evaluate a function variable (the fourth case). 
Holes correspond to the arguments (actual parameters) of this function variable 
that were “left behind” for a while. Later, a hole is found at top of the pds when 
we need to evaluate such a missing argument of an operator. In order to do so, 
we must restore the situation from the time of the call. The crucial thing is that 
the “time stamp” of the topmost item points out to exactly the moment in the 
past we need, namely to the stage when the hole was created. 


4 Pushdown systems 


By now, we have considered panic automata as tree acceptors, with the aim to 
characterize hyperalgebraic grammars. For the model-checking applications, it 
is convenient to use a related concept of pushdown systems which do not take 
inputs, but are equipped with ranks and alternation (c.f. [4, 21]). 

A 2nd order pushdown system with panic (or 2-PPDS, for short) is a tuple 
C = (P, P3, Py, T, pi, A, 2) where P is a finite set of control locations partitioned 
into Pa and Hy, T is a finite store alphabet, pı € P is the initial location, 
N : P — w is the rank function, and A C P x I x P x Op’ is the finite 
set of (unlabeled) transition rules (where Op” is as in Sect. 2). A transition 
(p,a,p’,a) € A is often written by p,a >A p’,a. 

A configuration of a 2-PPDS C is a pair (p, s) where p € P and s is a 2-stack 
over I’. A 2-PPDSC gives rise to a parity game Game(C) = (Va, W, E, (pi, (1, 0]), 2), 
where 


— V3 is the set of configurations of C with a location from P3, similarly for W; 
— (p, 8) E(p', 8") iff A(p,a,p',a) € A, top(s) = a and s' = a(s); 
= Up, s) = QAp). 


Problem 2. Given a 2-PPDS C, decide if Eva wins the game Game(C). 
Proposition 4.2. Problem 1 and Problem 2 are polynomial-time equivalent. 


Proof: (Sketch) By Theorem 3.1, we reduce Problem 1 to the question if a tree 
recognized by a panic automaton A is accepted by an alternating tree automaton 
B. Then a suitable 2-PPDS C is obtained by a standard product construction, 
such that Eve wins Game(C) if and only if she wins Game(B, ta) 

The converse transformation of Problem 2 to Problem 1 is also easy, after 
introduction of a suitable functional signature X (depending on the 2-PPDS C). 


Before proceeding to the proof of our main result, we show a useful trans- 
formation of 2-~-PPDS’s, which will allow us to control the dynamics of ranks by 
the topmost symbols on the pushdown store. 

Let Tr(C) be the tree obtained by unfolding the graph of Game(C). That is, 
the root of Tr(C) is labeled by the initial configuration, and a node labeled by 
(p, s) has a successor labeled (p’, s’), whenever (p, s)E(p’, s’). Note that a node 
of the tree determines a computation up to this node. 


Definition 4.3 Let a node v of Tr(C) be labeled with (q,s) such that panic(s) 
is defined. Let v’ be the closest to v ancestor of v labeled with (q', panic(s)), for 
some q’. We call v’ the panic ancestor of v. The panic rank of v is the mazimal 
rank of a state occurring between the panic ancestor of v and v, including the 
rank of v and excluding the rank of the panic ancestor of v. 

A 2-PPDSC is rank-aware iff there exists a function Rank : l > Rg(2) such 
that the panic rank of every node v of Tr(C) labeled (q, s) is equal to Rank(top(s)). 
That is, the panic rank is determined by the top of the stack. 


Lemma 4.4. For every 2-PPDSC, one can construct in polynomial time a rank- 
aware 2-PPDS C', such that Eve wins Game(C’) iff she wins in Game(C). 


Proof: (Idea) The stack alphabet of C’ is defined as I’ = F x {0,...,d}*, where 
d is the highest rank in Rg(2). The construction ensures that if (a, mp, mz) is 
currently on top of the stack, then m, is the panic rank of the node, and m; is 
the highest rank of a state seen since the creation of the current top row. 

The construction of transitions of C’ goes naturally case by case. The cor- 
rectness proof is straightforward, but tedious. 


5 Deciding the winner in Game(C) 


A 2nd order pushdown system (or 2-PDS, for short) is like a 2-PPDS defined in 
section 4, but without panic, that is, A C P x I x P x (Op’ — {panic}). Then 
a level 1 pushdown store can be viewed just as a word over I (not I’ x w). The 
concepts of 2-pds, configuration, and Game(C) are simplified accordingly. 

Games over such pushdown systems have been considered by Engelfriet [11], 
Cachat [4], and others. 


10 


Lemma 5.5 ((11, 4, 5]). It is decidable if Eve wins Game(C) for a given 2nd- 
order pushdown system C = (P, P3, Py, T, p1, A, 2). There is an algorithm work- 


ig 21712902D and the problem is 2-EXPTIME-complete. 


ing in time 

We now transform a rank-aware 2nd order pushdown system with panic 
C = (P, P3, Py, T, pi, A, 2) into a 2nd order pushdown system without panic C’ = 
(P', P4, P}, I”, p1, A’, 2’), such that Eve wins Game(C) iff she wins Game(C’). 

For technical convenience, we assume that a transition p,a >a p’,a with 
a # skip is possible only for p € P3. Clearly, we can always achieve this property 
by duplicating locations and using skip operation. 

Let Rank : T — Rg(Q2) = {0,...,d} be the function of Definition 4.3. We 
introduce an ordering on ranks: m x n iff (—1)™-m < (—1)” -n (e.g., for d = 6, 
this yields an ordering 5,3, 1,0,2,4, 6). 

We define the set of returns as 


Ret = P-+{0,...,d}, 


The intention is that a partial function R € Ret assigns to a location p the worst, 
in <-order, panic rank still acceptable for the panic moves ending in position p. 
We let 


Pa =P3U {L}, 
Py =Py U {Ppush, Pver, Prank=i : p € P, i € {0,...,d}} U{T} U {ver} U Auz 
I" =Ret U (T x Ret). 


The rank function 2’ is 0 for all the locations except for 
Q(p)=2(p),  Q (Prank=i) =i; for all p € P. 
The transition rules A’ are defined by the following clauses. 


— If p,a >14 p', skip then p, (a, R) >a’ p’, skip, for all R € Ret. 

— Ifp,a— a p’, push, (a) then p, (a, R) >a Pher, push, ((a’, R’)), for all R, R' € 
Ret. Additionally we have p'ep, (a’, R') >a: ver, skip, and pien, (a, R) =~ 
p', skip. 

— From the location ver the moves are defined in such a way that Eve wins iff 
R in the top letter of the top-most 1-stack is the same as R at the top of 
1-stack just below the top-most 1-stack. 

— If p,a a p’, pushy then p, (a, R) >a’ Ppusn: push (R’), for all R, R’ € Ret. 
Additionally we put in A’ the rules® Poush R! >x p', pushy; pop,, as well as 
Ppush’ R' DA Prank=R' (p) POP1, and Prank=R!(p!’)? (a, R) PA p”, skip, for 
all p” such that R'(p”) is defined. 

— If p,a >14 p', pop, then p, (a, R) >’ p', popi, for all R € Ret. 


T The single exponential dependence on |I| is not made explicit in these references, 
but it follows from the analysis of level 1 pushdown systems in [21]. 
8 Notation like p,a — 4’ p’,a1; a2 clearly abbreviates two rules. 
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— If p,a >14 p', pop, then p, (a, R) >a p’, pops; pop,, for all R € Ret. 

— If p,a >, p’, panic then p, (a, R) >a T, skip if Rank(a) > R(p’), and we 
have p, (a, R) >,’ L, skip otherwise, i.e., when Rank(a) < R(p’) or R(p’) is 
undefined. 

— There are no transitions from states T and L. This implies that Eve wins in 
T and loses in L. 


Proposition 5.6. Eve wins in Game(C’) iff she wins in Game(C). 


Proof: (Idea) The construction guarantees that a 2-pds in a reachable configu- 
ration of C’ has a form v = [w1 Ry]... [we Rx] [wk+1], where w; € (I x Ret)* and 
R; € Ret. We say that v represents a 2-pds s = [s1]... [8x41] of C if, for all 4, 
si l1= wi li, and if s; |2= £ then w; |2= Re. Note that a possibly infinite domain 
of “time stamps” (in C) is represented here by the finite set Ret. Both players 
can ensure that the 2-stacks reachable in Game(C’) represent the 2-stacks of C. 
Together with the mechanism of returns, this allows them to transfer the strate- 
gies from Game(C) to Game(C’). 


We are now ready to state our main result. 


Theorem 5.7. The problem of checking if Eva wins Game(C), for a given 2nd 
order pushdown system with panic C, is 2-EXPTIME-complete (Problem 2). Con- 
sequently, so is the problem of checking if an alternating parity tree automaton 
B accepts the tree [G] generated by an hyperalgebraic grammar G (Problem 1). 


Proof: The 2-EXPTIME hardness result follows from Lemma 5.5, and Propo- 
sition 4.2. To show the upper bound, let C be a 2-PPDS. By Lemma 4.4 we 
can assume that C is rank-aware. To solve Game(C) we construct a 2-PDS C’ 
(without panic), as in Proposition 5.6. The system C’ has the number of stack 
letters which is exponential in the size of C, but the number of locations of C’ 
is linear in the number of locations of C. By the first part of Lemma 5.5, the 
winner in the game Game(C’) can be decided in time doubly exponential in the 
number of states and singly exponential in the number of stack symbols, which 
gives us the desired complexity. 


By the relation between automata, p-calculus, and monadic logic (c.f. sec- 
tion 1), we obtain the following. 


Corollary 5.8. It is 2-EXPTIME-complete to check if [G] H y, for a given 2nd 
order grammar G, and a given p-calculus formula p. Consequently, the analogous 
problem for the monadic second-order logic (MSO) is decidable, in particular the 
MSO theory of any hyperalgebraic tree is decidable. 
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